Information Protection Principles (IPPs) for agencies
Read the document below or download it here Fact sheet - Information Protection Principles for agencies, updated May 2020
The 12 Information Protection Principles (IPPs) are your key to the Privacy and Personal Information Protection Act 1998 (PPIP Act).
General information
There are legal obligations which NSW public sector agencies, statutory bodies, universities and local councils must abide by when they collect, store, use or disclose personal information. As exemptions may apply in some instances, it is therefore suggested you contact the Privacy Contact Officer in your agency or our office for further advice.
Collection
- Lawful
Only collect personal information for a lawful purpose, which is directly related to the agency’s function or activities and necessary for that purpose.
- Direct
Only collect personal information directly from the person concerned, unless they have authorised collection from someone else, or if the person is under the age of 16 and the information has been provided by a parent or guardian.
- Open
Inform the person you are collecting the information from why you are collecting it, what you will do with it and who else might see it. Tell the person how they can view and correct their personal information, if the information is required by law or voluntary, and any consequences that may apply if they decide not to provide their information.
- Relevant
Ensure that the personal information is relevant, accurate, complete, up-to-date and not excessive and that the collection does not unreasonably intrude into the personal affairs of the individual.
Storage
- Secure
Store personal information securely, keep it no longer than necessary and dispose of it appropriately. It should also be protected from unauthorised access, use, modification or disclosure.
Access and Accuracy
- Transparent
Explain to the person what personal information about them is being stored, why it is being used and any rights they have to access it.
- Accessible
Allow people to access their personal information without excessive delay or expense.
- Correct
Allow people to update, correct or amend their personal information where necessary.
Use
- Accurate
Make sure that the personal information is relevant, accurate, up to date and complete before using it.
- Limited
Only use personal information for the purpose it was collected unless the person has given their consent, or the purpose of use is directly related to the purpose for which it was collected, or to prevent or lessen a serious or imminent threat to any person’s health or safety.
Disclosure
- Restricted
Only disclose personal information with a person’s consent or if the person was told at the time that it would be disclosed, if disclosure is directly related to the purpose for which the information was collected and there is no reason to believe the person would object, or the person has been made aware that information of that kind is usually disclosed, or if disclosure is necessary to prevent a serious and imminent threat to any person’s health or safety.
- Safeguarded
An agency cannot disclose sensitive personal information without a person’s consent, for example, information about ethnic or racial origin, political opinions, religious or philosophical beliefs, sexual activities or trade union membership. It can only disclose sensitive information without consent in order to deal with a serious and imminent threat to any person’s health or safety.
Full text of the Information Protection Principles, can be seen in the relevant sections of the Privacy and Personal Information Protection Act, 1998 available on the Legislation NSW website: www.legislation.nsw.gov.au
If you would like further advice about the IPPs we encourage you to contact us. Before doing so, we suggest you review our Fact Sheet - The Role of the Privacy Commissioner: Consulting the IPC on Initiatives and Projects.
For more information
Contact the Information and Privacy Commission NSW (IPC):
Freecall: 1800 472 679
Email: ipcinfo@ipc.nsw.gov.au
Website: www.ipc.nsw.gov.au
NOTE: The information in this fact sheet is to be used as a guide only.
Legal advice should be sought in relation to individual circumstances.
